Making sure that the /oauth/cookie won't require auth