touch and store the authenticator as a cookie upon each request