SummaryAuthentication is hardCommon authentication issuesOptional authenticationUser should be able to log offRequired authenticationAutomatic log out after a period of inactivityPersonalised login pageForgot password pageCaching issuesConclusionAppendix: my .htaccess fileAppendix: my configuration Summary It is possible to distinguish between requests from authenticated and non-authenticated user