[eluser]jakelehner[/eluser]
I've had good luck with the session class. You'll use it pretty much the same as you're using your cookie now, except on login you'll set UserData, and to verify login you'll read UserData.
I also store user information (name, email, etc etc) as well for quick access.