get the auth identifier from the cookie or the header or return default

get the auth identifier from the cookie or the header or return default #168