Add test for existing vanity_id cookie.

* This should fix cross-authentication A/B tests so that the same alternative is shown.
* Add tests for ordering of vanity_id parameter, cookie and method.