in reply to CGI Authentication and Sessions

I recommend Apache::SessionX.
Boris