Thanks for pointing this out. Although I was confused at first, I could have sworn I mentioned this. But I guess that was in the Chatterbox.
I've read through Ovid's tutorial. I did the examples he had listed, and got some basic authentication going. But there were some holes in the tutorial that didn't quite answer my initial issues.
For example, generation of a session ID. Ovid kind of glossed over this. From a few searches I've determined that the session ID is just a randomly generated unique string. Guaranteeing a unique value sounds pretty easy with a module like Data::GUID, which I'll have to look into getting installed on my webhost.
Also the tutorial is very light on cookies and session info. I can set up a login, but keeping track of who is logged in and who isn't... not really addressed. I'm still working on that one.
So really what I need is something to bridge from Ovid's basic course to the CGI documentation (which also seems to leave a lot of things unanswered). But in any case, thanks for the suggestion.