Separate auth server and client sessions with different cookie names

So that when testing on the local machine, the sessions don't interfere
with each other.