This is part two of a set of posts breaking down some of the decisions I made when putting together the web server for townsourced. The first part is here.
Instead of a general overview, like part one, this post will focus specifically on User Authentication, i.e. how to handle passwords (if at all) and session management.