I have such sentence "Create a session based authentication", and I think that correct way to spell it, is like this: "Create a session-based authentication".
Am I right? I have followed answer for this question as a rule: correct use of hyphens to connect two words.