Sessions/tokens better support - can login, access data