added return false to the autologin in CookieStrategy