title: koajs session - where is the session stored?
body: <p>I am using <a href="https://github.com/koajs/session" rel="noreferrer">this</a> module for koajs sessions.</p>
  
  <p>I checked the source code but I really cannot understand it.
  I am trying to know where it is saving the session data, because I see no files created, and when the server is restarted the session data is still there.</p>
  
  <p>I got the feeling it is saving the data in the cookie itself, then I see it creates two cookies with scrambled text.</p>
  
  <p>Now, is it encoding the data in the cookie itself (unsecure) or is it saving the data on the server in a manner I do not understand yet?</p>