Authentication is a very simple subject. Authentication is nothing more than verifying who you are through the use of unique passwords, fingerprints(biometrics), and id cards. Authentication can be achieve using one or all of the previously listed forms. Being so simple, many programmers overlook the importance of setting the proper controls to management this very important system. The problem with authentication comes from the alternatives that programmers build into systems to handle a situation where the user is not able to produced what is needed to authenticate themselves for any one session. When mentioning authentication, one has to often consider the session as well. A session is a designated point of time that a user is granted access to a system. The session can be open to all, not requiring a unique login, or it could be private and only accessible through the use of authentication. Some very important information is contained in the session. The session can contain the user's name, password, and session token. These items are key to establishing any session, and are als...