have a stateless app as long we don't use a login form