offline: Prefer user-supplied param to browser-supplied cookie in the authen proxy