add saving of session and token to cookies
ignore config file