rough auth cookie over sockets