always send authentication cookies