Use JSON for the authentication cookie.