>>> I've never worked at a company where auth or storing user sessions was a bottleneck. I can tell you from my experience working at JP Morgan (the largest U

>>> I've never worked at a company where auth or storing user sessions was a bottleneck. I can tell you from my experience working at JP Morgan (the largest US bank) that authentication checks was the #1 root cause of major outages. That is, except when it was #2. It was a close tie with network related issues depending on the season. It's easy enough to understand that when sessions can't be checked, every application and service that need to check sessions are effectively 100% down. Another hard learned fact is that (very) critical services or (very) high traffic services will simply never support remote sessions, because it's too slow and unreliable. (There are potential alternatives like JWT tokens or TLS authentication).