use CGI::Session;

sub handler {
    my ($r) = @_;

    # check CGI session
    my $session = new CGI::Session();
    my $authuser = $session->param( 'AUTHUSER' );

    # pass authuser to Apache log handler
    $r->user( $authuser ) if ( $authuser );

    # handle page
    # ...
}