Comment by baybal2

I learned few years ago that you can do TLS auth without client side certs.

People were always surprised how they stay logged in after clearing cookies.