Comment by heterodoxxed

Simple session tokens are fine, always have been.