This is an old authentication method that uses sessions.