authorizes the class/method and sets cookies for root path and for 10 years