But you can't tell that without allowing the cookie - you just get a login prompt and 'not allowed to view this resource'.