in reply to Login and CGI security ("open cookie jar") problem.

You could also just dump the password and login id to the cookie jar, but encrypt them with a private key.