I'd like to develop some web applications that relate to Accounts and Characters without forcing folks to have yet another login and password.

Is it possible to securely identify the logged in Goblinworks User in a particular web session?
Nihimon murmurs in sheer ecstasy as the magic courses through his veins