add isSuccess
only rewrite cookies if the app wants us to