I don't get it. What benefits does this offer as an authentication method?
And what stops the authenticating server from stealing your coins by not returning them on logout or session expiry?