I'm making web app that will be fully based on Ajax requests. As I understand the only way to achieve that goal is to send identity and password with every Ajax request or am I wrong? I'd like to use ZfcUser to perform actions connected with register, login and logout but if I'm calling that on server side: I'm making web app that will be fully based on