title: Web authentication state - Session vs Cookie?
body: <p>What's the best way to authenticate and track user authentication state from page to page? Some say session state, some say cookies? </p>
  
  <p>Could I just use a session variable that has the ID of the user and upon authentication, instatiate a custom User class that has the User's information. Then, on every page, verify the session variable is still active and access basic user data from the User object? </p>
  
  <p>Any thoughts? Any good examples?</p>