updated CookieAuthMech to use the cookies set by account app