answer to question of why not open the auth url from cordova? why first open auth.example.com? coz I need to place some cookies first based on which token claims are set