adding set auth cookie