Session state in login to allow or deny access. Works on basic level.