password and cookie script