Sign in

Session held in an HttpOnly cookie ยท revocable server-side