There is session storage much like in a web browser. So you can use the same cookie-based auth techniques.