Add a cookie auth
Some refactoring in play.authentication