Ops! That's my fault! Here it is:

1. sprintf() is not used anymore in query building. String interpolation is faster and cleaner.
2. Instead of just parameters for database connection, the constructor now accepts a single parameter holding a DBI Object. Usually I share a DBI connection throught all mya pplication source code.
3. Introduced a new parameter into the constructor to tell CGI::Session::Auth::DBI how to update and compare password values (I protect my database-stored passwords with MD5 Digest armoring).