login: replace http authentication by cookie system