adding authentication
login works
login & logout & cookies work