github.blog ask for cookies, but github.com does not