Which statement regarding session$-$based authentication is true?

Session$-$based authentication uses tokens to authenticate.

Session$-$based authentication uses cookies to authenticate.

Session$-$based authentication uses Base$64-$encoded strings to authenticate.

Session$-$based authentication uses the authorization header to authenticate.