> I've managed to get logged in & downloading some of
> the https form-login site.
> 
> Another suggestion for the FAQ and CatchURL tutorial
> is a warning to filter out the logout page, if any. 
> Such as
>   -logout.html
> (or does it need to be
>   -www.sample.com/logout.html
> )

That's a good suggestion - thanks.

A general filter could be used, e.g.
-*logout.jsp*

Or more specific
-www.example.com/logout.jsp*

(probably want the * on the end to cover any possible querystring params.)