I wonder if I missunderstood something but while the integrated,

form-based security model seems quiet useful I do not understand

why this is based on cookies rather than on sessions.

Since you are now able to use cookieless session handling why

use cookies for security????



Do I miss something?



Mike