Yes, you are right about the expiring cookie, sorry for the confusion. I think only using the test cookie for login and then removing it would be the cleanest solution.