fixed error with cookie based authentication of school sites
simplified auth ... too clever before