Documentation for setting session cookie at login, blocking CHALLENGE when this is...