there's way too much javascript on the site; they need to tighten that sh|t up & put it in the session object. the best haxxor weapon of choice? a browser in debug mode. if you have the time, i encourage you to play around with it & see the different states you can put your session in. truly magical.