more importantly, you can track sessions, not just logins. So if one user is logged in twice, the sessions don't mangle each other. Cookies are a *very* important part of true collaboration and thus OpenACS.