Internet Explorer sometimes doesn't keep cookies, and Safari is not working at all.
I decided to give up cookies,and pulling the "user id" from the signed-request data (for each request/page), that idea worked well only for my main page.
But when trying to see other pages in my app, I don't have the signed request anymore, and still cookies are making problems.
I don't know how other apps do that, but this looks impossible.