Web Security Basic HTTP Authentication — a client and a server exchanging HTTP messages step by step: the 401 challenge, the password in every request, and what a session cookie adds Cookies and Sessions — a form login, the cookie that carries the session from then on, and the record behind it, in the server's memory …