Update: A bit more testing. Now seems I can do without the "lu" cookie as well, without losing my login. So conclusion is you can stay logged in to FB by whitelisting the two cookies: "c_user" and "xs".
Knowing FB, this could all change at some future time.
Hope this helps someone.
Lance