Address #164: keep opener; properly create csrftoken cookie

Keeping the URL opener between requests, and also properly creating a cookie (cookielib.Cookie() + CookieJar.set_cookie()) seems to solve the recent authentication problems