REF: remove cookie and auth libs, move to cookie-auth npm module