Authentication moved to cookie-based storage