Coming from the web development world, I'm used to having single sign-on and session timeout/redirection to a login page handled on the server side. From a rich client perspective …