Note that I said "In its very simplest form." I use a significantly better authentication scheme for my real sites, but I didn't want to make the example overly complex.