restoring access to 'frontend' via cookieValidationKey