update cookie handling for hiding the auth section