Cookie auth fix.

Leading whitespace is now trimmed from cookie names.