everyone can log in and get cookies for testing