The ultimate fallback always is to revert to letting user sign in manually. Installation success doesn't depend on cookies, so that should be just fine.