Rip out sessions, they don't work cross domain. Rely on information received previously. Sessions will not extend past the current browser session most likely.

php/Ping.php

@@ -20,13 +20,6 @@ if(!defined("CLIENTPSK")) {
         // Authorized. Send the PSK value to the client
         $allow=true;
         $psk = PSK;
-
-        // Check session
-        if(isset($_SESSION['login'])) {
-            $logged_in = true;
-            $user = $_SESSION['user'];
-            $display_name = $_SESSION['display_name'];
-        }
     }else {
         $allow=false;
     }
@@ -42,10 +35,7 @@ if(!defined("CLIENTPSK")) {
 $ret = array(
     "type" => "S2CPong",
     "authorized" => $allow,
-    "user" => $user,
-    "display_name" => $display_name,
     "psk" => $psk,
-    "login" => $logged_in,
     "user_count" => $totalUsers
 );