dont set secure cookies on localhost
getPersonPortraitURL accepts default and followRedirect parameters and returns a promise