Just checked the script it's a problem with the way the password is sent
for instance my password is
"X}W(2%^sf6x+"u"
but in the webpage cookie it's sent as
pbkdf2_sha256$24000$9WOf5OAQr9H2$TS6RrwHHbE77DUi4X NNA4lzKtO6W9HwdquoolXC9Zhs\u003D
so it's creating a sha256 of our password
