title: Store session token on ASP .NET server
body: <p>I'm new to Web. Now I'm trying to develop custom user authentication using cookies. When user logins I supply server responce with cookie which contains userId and randomly generated session token guid. When user then requests to the server, it extracts authentication cookie from request, so the server gets back information about userId and user session.</p>
  
  <p>My question is: where should I store and check session token which comes along with users' requests? What if malefactor will falsify cookie with fake userId and session token? </p>
  
  <p>Now there is no place in my program where I store and then check mappings between userId and their session tokens.</p>