my $auth = new CGI::Session::Auth({ CGI => $cgi, Session => $session });
$cgi->param('_auth',$auth);
$auth->authenticate();