Comment by aaronmu

What's the difference between an opaque token and a cookie that has a single session identifier in it? 'y know - the way we did it in the 90's.