Password auth working, cookie auth not working