otp: Redirect with cookie and test it