Authentication happens on a trust basis and no separate session authentication is required. All calls from the source IP must be treated as valid, and no session ID will be generated or stored.