Change cookie to use auth hash and user object