[Zope] Minor CookieCrumbler Problem

I'm using CC with SimpleUserFolder. Interesting problem: I've got two areas of my site, which require different levels of authorization; area 1 requires lower auth than area 2, so if someone authenticates to get access to 1, they may be prompted again when they try area 2. The first successful authentication/authorization attempt is always managed by CC -- so if I go to area 1 first, I get CC login screen; if I go to area 2 first, same thing. But if I go to area 1, authenticate, and then try to go to area 2, I get the HTTP Basic auth popup. Am I missing something obvious? This is Zope 2.7 on Solaris 9. -roy