Now with credentials in cookie (no chocolat chip)