OpenID login: Fix Cookie parsing

Turns out the split on '=' left the value as " session" so the string
comparison failed.

Note: The sessionid we're getting back is still invalid so that still
needs to be investigated.