fix: don't unauthenticate cookie users who use tokens
Created by: ijsnow
Don't un-authenticate users who are making a request with a token.
This PR does not need to update the CHANGELOG because it currently doesn't affect users. This change is simply required for an incoming change to the browser extension.