Restricted cookie auth to endpoints where it is needed, some simplifications, and extended testing

14 jobs for 772-cookie-based-authentication in 38 minutes and 41 seconds (queued for 2 seconds)