adds cookie based login
change session to expire in 2 weeks