title: How to handle SPA authentication to an ASP.NET MVC 5 back end without using Session?
body: <p>I am currently developing a SPA application that uses only a couple of full Razor views.  Any time I ask a Controller for data, I am checking a Session variable to see if the user is currently logged in and authorized.  This "feels" right in a standard MVC/Webforms application, but not so much in an SPA when it comes to handling timeouts, etc.</p>
  
  <p>Overall this is working fine, but I am wondering if there are any existing best practices or alternate ways to handle this basic situation?  Just looking to learn!  Thank you.</p>