Wes @weskerfootSession Cookies were a mistake https://w3c.github.io/webappsec-cors-for-developers/#csrf…9:31 PM · Jul 9, 2019·Twitter Web Client