localStorage-based auth drivers can fall back to cookies.