>Wouldn't that actually login that user? I do not want to log anyone in for real, I just want to verify that the password they gave me is their network username/password.
It would, momentarily, as the handle is closed immediately and there are no processes ran with that token.
"The five senses obstruct or deform the apprehension of reality."
Jorge L. Borges?
"Premature optimization is the root of all evil in programming."
Donald Knuth, repeating C. A. R. Hoare
"To die for a religion is easier than to live it absolutely"
Jorge L. Borges