Authentication

![](http://imgs.xkcd.com/comics/security.png)
ah nvm, then we wont have the session instance