fix non-popup/full-page redirect login access token cookie