While you can use sessions in Sails for whatever you like, it is generally a best module.exports = { login: function(req, res) { // Authentication code here // If .