Sessions are now implemented (with session cookie instead of user and password cookie)