I was thinking that this could be used similar to a session key in an application. So if you made a web server, you could allow all traffic to say: /login that

I was thinking that this could be used similar to a session key in an application. So if you made a web server, you could allow all traffic to say: /login that then recieves the key after authentication. This could then be used to reach the secure area of your application, and anyone without the secure key cant even detect that part of the app.