I dont like a lot the idea of ask the user for an authenticated cookie. Would be better to just ask for username and password and proceed with authentication and cookie retrieval automatically. It would be more user friendly. Any reason to not do something like that?