Playing around with authentication and session tokens.