Objective

To work with sessions to provide authentication

Biag likes what you've provided for him to manage his library of books, so much that he wants to go public with it, but he's concerned about security. The problem is that if his library app is available online then anyone on the internet will be able to add, edit, or delete his books.

What he would like for you to do is to provide a way that he can maintain all of the capabilities in the app that he currently has but that the general public will only be able to view the list of his books and their details.

To do this you explain to him that you'll need to implement an authentication system for his site where he'll be able to login to gain access to the abilities to add, edit, and delete books, others who cannot login will only be able to view his books. He's okay with this but insists that he also be able to easily add other people to the list of authorized users so he can allow other trusted people to manage his library on his behalf.