use stored passwords to re-login to scratch if the sessid has expired. I'm not sure of the requirements for sessid expiry though