Probably a stupid question, but why is it not possible for a browser to ignore cookies from a site where the user chose 'Do Not Track' then that's it, they can't have cookies, can't log in e.t.c alternatively a few white labeled cookies can be agreed upon as a standard e.g just to support maintaining logged in sessions