blah
changed cookie-authentication to json web token authentication