Session based authentication for resources.