imo the problem isn’t how you authenticate yourself but how anybody with that cookie is now verified as you