Sign in w/o rewrite
Sign in w/ rewrite api

no cookie