Explain the concepts of user authentication and authorization in web applications, including techniques such as password hashing, session management, and role-based access control (RBAC).