Users typically use the same browser on each device, so using first party cookies to identify a device for web logins is not that far fetched of a solution.