On user creation (POST /api/users) also login and return auth cookie.