The login is done through session variables. When a session is started, a cookie will be stored on the clients computer with the session ID.
I would suspect that her browser has cookies turned off, or turned off for that domain.
Have them try a different browser.