A
Anonymous
Guest
Should *NEVER* make a password a session variable.
If anything, a user ID, user access code, username and any groups they belong to.
If anything, a user ID, user access code, username and any groups they belong to.