`login()` will either throw or get a valid cookie in the process.