login and logout cookie stuff working