Another way to do this without cookies is to create a standard security function at the top of all your pages. The security function automatically checks to see if the user has the correct credentials. The downside to this system is that you have to create hidden fields on each of your pages that will transfer the credentials to the next page.
If you can possibly use a session or cookies I would go that route because my way forces you to put a form on EVERY page with your navigation buttons on it to take the user from place to place. The only reason to do this would be if you needed to support browser clients who could not use sessions or cookies.
Kablarg (M7_B5)