I have a demo of cookies based authentication at: http://hazeltonsec-18.cmsd.bc.ca/cgi-bin/koha/shelves.pl You will need to login to access the shelves.pl script (no other scripts have been modified). I have the inactivity timeout set to 20 seconds, so you can also see how that works. You can login using one of two identities: userid: librarian password: koha userid: patron password: koha Steve.