fixed cookie bug that was causing 403 on signin