I've come up with some difficult (not impossible) problems imposed by the current setup:
Retrieving private messages requires passing a cookie with user info. Tough, but not impossible. How 'bout adding more options to the cgi to allow us to authenticate that way?
=Brian