Jeff, I do exactly the same but I just use cflogin to leverage the credentials but I use my own authentication system. Nowadays I just keep in my sessions the minimum information that is related to security.
Till now it has worked flawlessly. -- João Fernandes http://www.onflexwithcf.org http://www.riapt.org Portugal Adobe User Group (http://aug.riapt.org)
