flow all routes through cookie check for easy dev (temp)
minor code cleanup && generalization