Discourse login by cookie token

[michaeld (Michael - Communiteq)]

This is insecure. A user could tamper with the cookie in their browser and log in as someone else.

You should use DiscourseConnect instead.