authInterceptor added so the client will send the headers accordingly
refactored to use ipCookie for cookies with expiration