The headers you provided appear correct. Are you able to log into Waze wiki using another framework? If so, it might be useful to compare the headers between the successful client and yours to identify what the difference might be. Perhaps Waze's infrastructure is somehow screwing up on the obsolete RFC 2965 cookie headers, for example.