Personally I expect cookie support since it's much harder to support a login mechanism otherwise. On the other hand, I'd use javascript only to enable nice int

Personally I expect cookie support since it's much harder to support a login mechanism otherwise. On the other hand, I'd use javascript only to enable nice interactive additional features but the site should degrade gracefully when it's not. In fact I should probably state that as: The site works normally without javascript and "upgrades" if it's enabled. The "degrades gracefully" sounds like "semi-supported, absolute last resort". I wouldn't do an all-ajax site...