No longer send Authorization header once authenticated

Added 'cookie' method for authorization - this is equivalent to null.
May need a rename
Do not fail a sync if logout fails - log the error and continue