In this chapter, we learned how to keep track of authenticated users by using the HTTP session. We also learned how to implement the remember me feature by using cookies in a secure way. Finally, we discussed authorization strategies, including coding authorization logic directly in UI components and coding it by using request data.