for some reason when i did something like
PHP Code:
echo 'invite keys: '.$_SESSION['invitekeys'];
it showed it as thought it were an empty variable, yet when i store the session variable as something normal, say $invitekeys, it works perfectly.
It may have been a typo because it was a bit late in the night, but i decided it is easier to store it as a regular variable before putting any auth headers and freely accept the extra inefficiency ;-).