Implement HPCC Session Management

Because ESP is stateless, ECLWatch sends user credentials via unsecure HTTP with most requests. Users are unable to log out of ECLWatch, and because browsers cache credentials, to log in as another user requires clearing the browser cache or entering anonymous mode.
A better approach is to implement HPCC Sessions, where a user is initially authenticated via an HTTPS login screen, and granted a session ID. This session ID used for further request/responses, all via HTTPS