[development] how to intercept user login with cookie