Use cookie session to persist logged in vs logged out status