more progress on items_fetch (new name)
move new_cookie() to the session driver so we can use it for other purposes besides "normal" web login (for instance magic auth)