There's no session variables stored when you authenticate with the mobile app.
You have to validate every request if you are in an area that requires the user to be logged in.
It looks confusing, but if you follow the news module included in boonex you will see a mobile section, I used that and some experimentation to get my mobile modules working.
You can use your web browser to emulate the phone app, then do final testing on the mobile app
I added the security stuff at the end once I have the mobile module working properly so I can test it from my web browser 1st.
Right now I have my mobile development is on hold until I see how the new mobile app works (I really HOPE it doesn't break what I've been working on!).
Contact me on my site if you want some more advice, I don't get here everyday and some times I miss posts.