Added bypass cookie support

Replaces earlier STATIC_GENERATOR_AUTHENTICATED_COOKIE as more
generic and useful feature with support for more use cases.