Has anyone written a library for managing cookie-based sessions in Ur/Web? Seems like functionality that one might expect to get out of the box. (Or are Ur/Web cookies secretly non-forgeable, so I can use them the "obvious" way?) Edward