I am building a service currently in which the authentication is managed by way of a session token. A user enters their email address, and if their email address is valid th