I've logged in as kate mwahahahaha

[thejoefriel]

Seems like there's no password validation so as long as you have a cookie

[thejoefriel]

Looking through I think this is maybe due to you not invoking this in the log in handler?

[sbinlondon]

Oh noooo