update auth handler
Remove isAuthenticated check on login
Add tests for cookie authentication