I used sessions to authenticate users