cookies authentication: login/logout/ntml login actions