Letting the browser generate the unique ID (such as a guid) may actually have benefits for users. As long as the identifiers are kept secret you would have the benefit of a login without the site needing to store any personal information. This gives much more positive control to users than an opaque cookie. It is also easier to make legislation around as you could mandate that the user supplied unique ID is the only information (along with basic browser details) that can be stored.