Allow both types of authentication

This will allow both types of authentication (the new cookie based and the old URL based methods).