I wrote a Registeration and Login Servlet Program

In which i'm stuck in a place where if a user has forgotten its username and password then only with the help of security question (which i want to be stored in Cookies) user should able to login..

I'm confused in which form should i add cookie and read cookie..

Why a cookie? A cookie is temporary and only applies to a single browser.