The "login thing" was not broken. :-)
The problem was that someone exploited a session ID loophole (yes, I know from the logs EVERY IP that took advantage of it and who's account was used). This has since been sealed up so, I hope you enjoyed it while you could. ;-)
