We could also go back to basic auth. No idea how long browsers keep your login to be resend every time, but they do so as it seems. So you don't have to type in you login on every refresh at least. But yeah, any known convenience would die without any and all cookies.