A method comprising: conducting operations in a mobile wireless communications device (115, 415) using a controller of the mobile wireless communications device (115, 415), the operations including: capturing an image displayed on a client device; decoding the image; establishing a secure communication connection between the mobile wireless communications device (115, 415) and a server (105, 505); transmitting to the server (105, 505), via the secure communication connection, authenticating data of a user log-in between the client device and the server (105, 505) without an authentication token being provided to the client device, the authenticating data being based on the decoded image; conducting, after the user log-in, a confirmation of a transaction of an application of the server (105, 505) during an interactive session between the client device and the server (105, 505), the confirmation being conducted via a communication from the mobile wireless communications device to the server (105, 505) to complete the confirmation without an authentication token being provided to the client device; and conducting, after the user log-in and the confirmation, logoff between the client device and the server (105, 505) by generating a logoff request in the mobile wireless communications device (115, 415) and transmitting the logoff request to the server (105, 505), the logoff request including data to terminate connection of the server (105, 505) and the client device, the data corresponding to the user log-in between the client device and the server (105, 505), without an authentication token being provided to the client device. conducting operations in a mobile wireless communications device (115, 415) using a controller of the mobile wireless communications device (115, 415), the operations including: capturing an image displayed on a client device; decoding the image; establishing a secure communication connection between the mobile wireless communications device (115, 415) and a server (105, 505); transmitting to the server (105, 505), via the secure communication connection, authenticating data of a user log-in between the client device and the server (105, 505) without an authentication token being provided to the client device, the authenticating data being based on the decoded image; conducting, after the user log-in, a confirmation of a transaction of an application of the server (105, 505) during an interactive session between the client device and the server (105, 505), the confirmation being conducted via a communication from the mobile wireless communications device to the server (105, 505) to complete the confirmation without an authentication token being provided to the client device; and conducting, after the user log-in and the confirmation, logoff between the client device and the server (105, 505) by generating a logoff request in the mobile wireless communications device (115, 415) and transmitting the logoff request to the server (105, 505), the logoff request including data to terminate connection of the server (105, 505) and the client device, the data corresponding to the user log-in between the client device and the server (105, 505), without an authentication token being provided to the client device. capturing an image displayed on a client device; decoding the image; establishing a secure communication connection between the mobile wireless communications device (115, 415) and a server (105, 505); transmitting to the server (105, 505), via the secure communication connection, authenticating data of a user log-in between the client device and the server (105, 505) without an authentication token being provided to the client device, the authenticating data being based on the decoded image; conducting, after the user log-in, a confirmation of a transaction of an application of the server (105, 505) during an interactive session between the client device and the server (105, 505), the confirmation being conducted via a communication from the mobile wireless communications device to the server (105, 505) to complete the confirmation without an authentication token being provided to the client device; and conducting, after the user log-in and the confirmation, logoff between the client device and the server (105, 505) by generating a logoff request in the mobile wireless communications device (115, 415) and transmitting the logoff request to the server (105, 505), the logoff request including data to terminate connection of the server (105, 505) and the client device, the data corresponding to the user log-in between the client device and the server (105, 505), without an authentication token being provided to the client device.