Added cookies, but they're wrong. Need to write a required handler to inject a valid user