Cookies are a thing that should be solved client-side.... so basically, no third party cookies, cookie jars per domain, and default wipe-on-tab(window)-close + a button to enable cookies per domain somwhere, for the logins to work.