Ok. hats off.
you're giving me so much good "gyan" a term we use in India ..i cant take it:D
im not a big fan of cookies in web development, and i want to use only CGISESSID (which i now know also shows up as a cookie).
Will check out problems with session expiration too.