I'm trying and managing with CookieCrumbler (as you all suggested). I've got a logout problem: when I try to logout with the standard logged_out method, it always goes to the "You're using HTTP based Authentication" part. the prbole is that AUTHENTICADED_USER in REQUEST can't be "Anonymous User" because no one sets it! Have I to set it by hand in some DTML-or-Python script? Many thanks Alex Cordero Prova Genie Disco Virtuale: 10 gg. gratis per te! Per attivarlo clicca qui http://www.genie.it/provadiscovirtuale