💡 Authenticated via Server-side PHP Session