Well, if cate hadn't locked me out, this would
probably be done.
Authentication sort of works
Cfscrpt concatenated for ease (that's a todo) and
authentication works pretty nicely. Need a way of storing
the password now.
Taking a rest for a night, almost there
Added session encrypted password store in db.

Encrypted with the session_id, the key should be lost
once the user has logged out, preventing anyone from
accessing the plaintext. Also, the session_id will be
determined by the connection and never held on the server,
preventing any server admin from gaining access to the
users password.

Connections to cate shall also only be made through a post
call to cate_request, which will also be authenticated with
devise. So any connections coming from anyone other than
a currently logged in user will be rejected, preventing
any third parties from even trying to use the servers own
logic to decrypt the password and make a connection to cate.