in reply to CGI::Widget::Tabs exposes login credentials in url.
If I go $q->delete('login_name','login_password'), my user has to re-login on every invocation. And it appears to lose its session.
CGI::Session::Auth should provide you with a method to delete those, its worth mentioning to the author.