If you are installing this somewhere where you already have a HTTP_USER environment variable, just use that instead if you want, to determine what user is presenting; but you still need to store the mapping back from the single-use key somewhere.

The single-sign-on keys are set elsewhere; the AIS client is responsible for directing NULL users to a log-in page or something like that -- logging people in is not the "present" script's problem