visual changes
added cookie session auth