Well, AuthTktCookiePlugin is also used outside of tests, isn't it? As far as I understand, it's the normal way of authenticating. So I'm fairly certain that this impacts production as well. Can we separate the functional tests into another PR?