I dont know much about CGI::Application, but with CGI, what youre saying sounds easy.

Cookies seem to be your solution. When a user signs on, give 'em a cookie which expires when the browser closes. Have your CGI(s) be cookie-aware and all sounds like it should be well.

Look at the docs for the CGI::cookie function.