Every auth system I saw for Ember was based on tokens. Is there a good reason why this is done instead of relying on server-side sessions? Given that ajax is just plain HTTP requests, I don't see any flaws in server-side sessions to maintain authentication status.
source share