trial standard cookie based authentication for mobile app rather than api-key