Do you have to authenticate every single time?

[george]

@099io

I wondered if an access token could be stored in a php session variable and then reused, say on another page?

Yes