removed old code used when authentication was partially based on Cookies