set a cookie to store user