AF Cookie should be reused within the context of same request.

Also adding some more functional tests for af.
Calling SaveCookieToken multiple times on the same request is what caused this bug in the first place.