sub retrieveSession($) {
    my ($query, $session) = @_;
    $sid = $query->cookie(CGISESSID=>$session->id) || undef;
    $sid = substr($sid, 10, -8);
    $session = new CGI::Session(undef, $sid, {Directory=>'/'});
    return getUser($session, $sid);
}