send auth cookie