fix webclient access: do not require cookie if we are talking to a completely different website
eg. kontocheck webservice for IBAN/BIC