Refactor some more and re-direct to auto.php after setting
up the cookie-free session.