always set ATC-Authorization cookie

[#72843274] [#72940010]