Comment by 383toast

What's the stance on security for handling private tokens/cookies/sessions/etc?