don't include ip in auth_tkt cookie