This approach is more suited to single-page apps, where the first request only fetches a template and all the subsequent requests to the website are done via AJ

This approach is more suited to single-page apps, where the first request only fetches a template and all the subsequent requests to the website are done via AJAX. In the post I'm not really arguing that nobody should ever use cookies - just that Web Storage is an alternative with comparable security.