`Wrong requested subject` when opening atomicdata.dev as agent

- sign in to atomicdata.dev
- refresh the page
- `Wrong requested subject`

This arises from the `get_auth_from_cookie` function. Relates to #525  #520 