Conditional session initialization on Auth

Attached is a patch that adds a flag to $auth->start() $auth->start(); // same behavour as usual.. $auth->start(true); // always register the session (eg. same as usual behaviour) $auth->start(false); will only initiate a session when a) the user tries to log in b) if there is an existing session (using $_REQUEST[session_name()]) I needed this to enable authentication information to be carried around a site which some parts are open, and others secure. - so I call start() on all pages, but dont want to generate session data/files for all visitors.. Regards Alan -- Can you help out? Need Consulting Services or Know of a Job? http://www.akbkhome.com