Authenticate only once per session.