Been playing around with Apache::AuthCookie, because I need something like this for a client. Combine this with Apache::Session::MySQL and all the tough work of making a three-tiered web apps is done! Kick ass! This would make a good article, I think.