Add cookie auth to /put