Missed a bit
Now uses machinekey to encrypt/decrypt auth cookie