When a user is not authenticated and uses a link to a non-html file (e.g. attachment) the login screen is returned. The content-type of the http resuest is not always set to text/html. If you add % SetContentType('text/html'); to the top of Elements/Login this problem is fixed. -- arthur de jong - arthur at west.nl - west consulting b.v. --