ipv6 hostname
Created by: drtdre
If the hostname is an ipv6 address (with colons), the 'token signature' is incorrectly identified as invalid. The user identity can be found by using a regex expression '/!(\w*)?!!pwd/' on $_SERVER['QUERY_STRING']
Not sure if this is really an issue, but may become one as ipv6 becomes more prevalent.