[Zope] user db cookie auth question