Work at fixing auth - not attaching cookies