in reply to PerlCGI / Cookies
In my experience using cookies just for session ids is a lot more secure and convenient though. That a look at CGI::Session.
update: fixed link