It's back to the drawing board...

 

I have a module that uses hook_init to check for the presence of a particular cookie. If it is there, then I call an external authentication server (this is mandatory at this customer). This all works fine until...