When a client requests to log in, it sends Username, Salt, Sign, and the server generates its own Sign based on the Password and Salt it receives and checks it against the Sign sent by the client, and if the check is correct, the log in is considered successful.

*Token uses a sliding time mechanism that starts at the point of last use and expires after 6 hours