We must use a secure connection, especially when the PIN number used to authenticate is only four digits. The Back Ends should be carrying this existing responsibility but this responsibility can extend to this level. From a Web administrators perspective, I should not have to dwell too deeply on this subject. By preparing a good scheme on the Front End and Middleware areas, I should be able to cope with any migration policy. Here are some finer levels of details.
Prospective students follow the path of marketing and admissions.
Current students proceed to recieve some timely information and authenticate themselves. For example, a student has authenticated themselves by either logging into a lab. The cookie will close their connection for them after a period of idle time. Now that we have a valid, active student, we can continue with self-service applications.