I have 3 applications in ASP.NET MVC 5, when logging in application 1 it opens a page with links to the other 2 applications how do I create a single session for the user and prevent it from copying the url and passing it to a colleague for example, and colleague access the application without login