Nick,

If my ID and password are in the returned URL immediatelt after the log on,
its not obvious. I've tried that URL by copying it to address in Excel and
it doesn't work. Can that info be returned to the server without ever being
displayed ?

I'm going to try a phony ID and password and compare that URL against the
one I thought was good to see if he's encoding them.

Thanks for jogging my mind, J e r