misc login updates to better support cookie-based logins