TBH, I didn’t make a second pass on sessions API a...

# ktor

[orangy]

TBH, I didn’t make a second pass on sessions API and it’s validation in general, so it’s a bit of “works on my machine” part. I don’t use sessions a lot, not much besides tracking current user, so cookie-value is ok for me, especially since I mostly code internal services.