@AlanHogan, the more I think about Ben's article the more I think this could just work - with some minor adjustments. I've been letting this sink in over the past week or so, playing through a whole host of use cases.
My minor changes.....
The link would only be valid for a very short period of time - say 5 mins.
The session die with inactivity, say 10 mins.
The session die when the browser is closed.
The link is a one hit wonder, tied to a machine/IP
The first 3 could be considered "settings", and be configurable, based on the site requirements.
