anybody using secure web.show_document

[bookouri]

Im have a button on a 10g form with
web.show_document('

http://myserver/reports/rwservlet?r...esformat=pdf&userid=readonly/readonly@orcl');

I need to remove the userid and password from the url and figure a way to not have to pass the userid and pass in cleartext in the url. Ive been trying to follow an Oracle white paper - Secure web.show_document() but I cant seem to make it work. Can anybody point me to any other resources for accomplishing something like this?


any suggestions would be appreciated..