Unsign auth token cookies per discussion on #215