Android Phone C / S software how to validate user

If you enter an account number and password , the server returns cookie, if someone is disabled cookie supposed
------ Solution --------------------- -----------------------
rest mode , token plus ssl safer
------ Solution ------ --------------------------------------
http post method request ah. . .
------ reference --------------------------------------- < br> solution solve solving
------ reference - --------------------------------------

In fact, I do not understand and what mechanisms are needed to verify the user's request security
user account password to use , the server returns a success , but if you want to request the server to verify the legitimacy of how data is returned , if you simply use a cookie or session, the event has been stolen , you can not imitate other people requested it
------ reference ---------------------------------------

like micro believe this software , landing once, each time you open an account before exiting are , how to do, just press the settings in the account in order to really exit the user exit
------ reference ---------------------------------------

like micro believe this software , landing once, each time you open an account before exiting are , how to do, just press the settings in the account in order to really exit user exit