Removed param 'cookie' on htmlAuthenticator and openAuthenticator (closes #4063)