cookies, headers and authentication - tRPC