Using Browser* to Log into websites?

[nblair2]

Has anyone successfully gotten GHOSTS to log into websites with the browser handlers, and then use that authentication to browse URLs that are protected by authentication? I have configured a handler with randomalt to do POST requests, and I can see the authentication attempts on my web server, but it looks like the cookie isn't getting caught / saved to the browser session, so that when the client tries to access protected content, they are not authorized.

Example handler:

    {
      "HandlerType": "BrowserFirefox",
      "HandlerArgs": {
        "isheadless": "false",
        "blockimages": "false",
        "blockstyles": "false",
        "blockflash": "false",
        "blockscripts": "false",
        "stickiness": "25",
        "stickiness-depth-min": "4",
        "stickiness-depth-max": "10",
        "incognito": "false",
        "javascript-enable": "true",
        "visited-remember": "10",
        "actions-before-restart": 100,
        "command-line-args": [
          "--ignore-certificate-errors"
        ]
      },
      "UtcTimeOn": "00:00:00",
      "UtcTimeOff": "24:00:00",
      "Initial": "http://mysite.com/",
      "Loop": true,
      "TimeLineEvents": [
        {
          "Command": "randomalt",
          "CommandArgs": [
            "http://mysite.com/",
            "http://mysite.com/stuff/",
            "http://mysite.com/things/",
            "http://mysite.com/dashboard",
            {
              "Uri": "http://mysite.com/login/",
              "Category": "cat1",
              "Method": "POST",
              "Headers": {
                "username": "username",
                "password": "password"
              },
              "FormValues": {
                "username": "username",
                "password": "password"
              }
            }
          ],
          "DelayAfter": 864000,
          "DelayBefore": 0
        }
      ]
    }