Fixed auth cookie parsing