Can someone explain how the author_token session variable works? The comments in the code merely say " Check author token to insure session not hijacked ". We're trying to implement a new authentication scheme which requires an intermediate login page, and it seems Serendipity is creating ...