fix auth/anon transition in cookies