I think there is still a problem with impersonate since it is no longer entered via a POST.
http://code.google.com/p/web2py/source/browse/gluon/tools.py#2330 if not self.is_logged_in() or not current.request.post_vars: should be if not self.is_logged_in(): Can someone confirm?
