Successful signin redirects to /.
Encapsulate user/auth/cookie stuff in Auth service.