HTTP is stateless: every request stands alone, and the server does not remember the one before. Yet you sign in once and stay signed in for weeks. Cookies and tokens are how.