This patch gives CGI hooks access to the session object. This enables more complicated CGI plugins (that require access control, for example). --Ethan