more about cookies and sessions;
user logins