A dead-basic cookie authentication middleware.