sso / sharing authenticated sessions how does it work