State in a System

Assume you are making a very simple login system. A user sends a request with a username and password. Let us list down what all needs to be present in the system. If the credentials are valid, a session should be created. All the authorized action...