Further notes - there are problems with this solution, in that there is no logout button, and cookies hang around for a day unless you clear them manually. It's useful as a protective measure, but it's not really a production solution.