allow reset of cookie auth through DELETE /authorization