Fixed typo in callbackUrl variable when resolving full url. Added
failsafe for cookie splitting.