Login via OpenID

Now this allow user to login via multiple OpenID accounts, I'll implement the web part after this and see if it will confuse the Interface part or I can fix it later if I find using just one account is more suitable. Any idea ? :)
Yep, the sid will persist for the life of the controller object, but there may be multiple objects in play.  I don't know if Catalyst ever creates more than one instance of a controller within the same instance of an app, but many web servers fork multiple processes to handle requests and this would result in multiple sids.  Imagine a request hitting server process A, being redirected to their OpenID provider, and then on the return request hitting server process B.  Does that make sense?