A2 – Building proper authentication and session management