I've decided to try using a 'secret' user and password in the php to access the calendar/password table. After logging into the calendar with a valid calendar/password pair the session_name() will be set equal to the calendar name. I'm hoping that this will allow a user to connect to a specific database and securly do select/update/modifiy/deletes without having to constantly check the calendar/password pair. Updates/modifies and deletes will be done only the with single 'secret' user/password as described above. This will avoid having to create new postgres users for each new calendar.
Any thoughts are welcome.
steeve