Using http-only cookies for auth
Updated to latest version of webauthz