Maybe the issue is with newKey?  In Authen.pm  it calls newKey like this
```
$Key = $db->newKey(user_id=>$userID, key=>$newKey, timestamp=>$timestamp);
```
In particular the $newKey variable is made with
```
my $newKey = $self->create_session($userID);
```
and doesn't seem to come for free from the db call.