OK... the basic idea is to have SERVER and CLIENT physically separated (two systems).
My idea is to build a stand-alone web service (REST, XML, API-KEY) that will pr
You should probably use HTTP authentication for the user auth, and so not need to do any sort of session management.