Persist session once request processing is complete.
IAuthenticator and IUser for security.
IPrincipal-based user authentication by default.