fixed authentication with POKAL cookies