Switched to signed cookies for auth.