[Zope] Cookie authentication: CUF and XUF