changed log in method back to using cookies. also session id is now stored