changed authentication to use sessionID and not to store passwords in cookies