User-Authentication

Problem Statement:- Make a app where there will be two collections in database, one for all the users of the app and another one for all the records of the perticular fields.if the user is logged in via post request then and then only the rest of the functinality will work. Including user details and adding a new user. including record details and doing CRUD with it. ---> if user tries to access the other fields without login, he should get the unauthorised access message. Or "You need to Login" Message. ---> #Make a use of Sessions and Cookie in this authentication.