Switch auth to use cookies instead of only basic. Relies on setting in controller to make it send JSESSION stuff upon initial login