This Plugin sets a cookie that can be used by the apache module mod_auth_tkt. The mod reads the cookie and automatically logins the user into apache when basic authentication is enabled. tokens are used for security, like groups. If required use LDAP to get group membership. see www.openfusion.com.au/labs/mod_auth_tkt/ for the mod_auth_tkt software. I add a option to put any errors into the cookie as this mod dose not display anything to the user, To see the cookie try Firefox - tools - options - show cookie, or install Firefox plugin livehttpheaders For info about the encryption please look at the php code. there is a encrypt and de-encrypt function in the code