Cookies authentication strategy for hapi