title: what data should I store in the FormsAuthentication Ticket?
body: <p>I need to store a list of user's friends so I can use it in every page (without the need to make a database query every time). </p>
  
  <p>I thought about <code>SessionState</code> but I think this is gonna be heavy, since the database is huge.</p>
  
  <p>So I need to know if using <code>FormsAuthenticationTicket</code> is the right way to do it? Or should I use <code>HttpOnly</code> Cookies too?</p>