Can I see the response headers from the auth.login call? Specifically, the set cookie header - I suspect the cookie might be domain-specific and thus not stored by the browser (since I can't see it used in the following requests)