Thanks for the help.

The user always stays within the same SSL site.

I will certainly look at the standard authorization next time I build an app like this. Are you talking about the .NET Membership stuff?

This app is supposed to be a quick project. "Not enough time to do it right" - you know how it goes ;)