Let the cookie be a session cookie.
Redesigned URLs. Base URL now clearer.