Switch to cookie based auth system