I'm not sure what prevents me from naming the cookie auth_token. But if I add a 2 at the end or use a different name, it works.