Fix login URL cookies and don't sanitize after config reading.