@mattl @grumpygamer How difficult would it be to implement a federated cookie system, so actions like the "follow" button would effectively take place in an iframe loading content from where the user is actually logged in? Are the security issues with cross-site cookies SO grave that it's just utterly unfeasible?