Hacker News Reader

»Obviously, cookies is the only adequate way to authenticate users.«

What's wrong with HTTP Authentication?

Nothing aside from the UI, really. Well, as long as you're not using Basic auth).

If browsers handled HTTP logout nicely, by displaying a prominent logout button somewhere, then developers' jobs would be far easier.

UI is not flexible