pointed at corslit.com, removed credential check, remove cookie helper
fixed tests