$http must send cookies for login to work