we should quit trying to establish the session faster when we don't have the tmpCookie
urlencode the username and password