Added cookies for authenticated requests, fixed password mismatch in mock and controller