Add a note about hacking with URL params instead of cookies

README

@@ -38,6 +38,28 @@ class SessionsController
   end
 end
 
+If you want to have Tender redirect to your site's login form and can't/don't want to use domain cookies you
+can just pass the variables in the URL.
+
+  Tender -> click "login" -> goes to your site -> returns to Tender with URL params
+
+You can implement this something like
+
+# /app/controllers/sessions_controller.rb
+class SessionsController
+  def login
+    if user = User.authenticate(params[:login], params[:password])
+      if params[:tender]
+        auth = user.tender_multipass({}, 1.week.from_now.to_i)
+        redirect_to "http://your.tenderapp.com/login?email=#{auth[:tender_email]}&expires=#{auth[:tender_expires]}&hash=#{auth[:tender_hash]}"
+      else
+        redirect_to "/"
+      end
+    end
+  end
+end
+
+
 Notes
 =====