Switch users from sessions to auth token cookies