Version 2.0 Authentication is done using session variables