One approach is to trace the web traffic with Wireshark and comparing a normal, manual login with the automated one. Perhaps the differences could reveal what is going wrong.