1. Wrong log. The other logging stream out of the module will generally tell you why it's invalidating the session. 2. Usually IP address changing. -- Scott