if cookie doesn't exist {
  if form input { #process form input
    validate
    if validate succeeds {
      generate cookie
      output new headers and success page
      exit
    }
  } else {
  generate headers (without cookie)
  generate form
  output all that
}