Secure authentication with session management