Keeping track of the currently logged in user is a challenge - as HTTP is, by definition 'stateless'. Hidden form fields, url rewriting and cookies are three common techniques for implementing sessions.
Explore how we need to refactor the application to support sessions
New forms needed to enable the user to signup / login
The API to create, access and destroy sessions.
Gomark V3 Review