Here's a failing test for #2864
Raise 400 for both empty and missing cookie
bring back b64decode

str.decode('base64') doesn't work in python3
Split out the two error cases for clarity
Merge pull request #2866 from gratipay/tweak-a-login-check

tweak a login check