i tried out the same code in my laptop but if i enter the wrong password the site is working fine but i cant see any difference in cookies from when i enter right password. in both cases im getting a cookie.how can i see the difference im cookie then??
also in private.js what is req.user, what exactly is this “user” and from where are we accessing it?