Sessions are not a stateless method of user authentication, which seems to break the web as it does not lend itself to RESTful communication. Why are they so much more popular?
Why aren’t more sites using HTTP Digest or Basic Auth type methodologies?
In most cases sessions are used to store a server side state consisting of more than just a login name. And in many cases corporate identity is also important and you cannot design the basic/digest auth dialog.