yes, i read this page, according to the diagram, i see it's necessary to send the username and password at least once, then the LS server send to the cliente a session_id.

about the SSL connection, is there any way to send the information with https?? regardless that the master push page has been dowloaded through https or not.

thanks for your help