"Look, if you just store the user id in an unsigned cookie it's only 6 characters." Um. Yeah. Also completely insecure. I know he mentions signed cookies shor

"Look, if you just store the user id in an unsigned cookie it's only 6 characters." Um. Yeah. Also completely insecure. I know he mentions signed cookies shortly afterwards but the way that part of phrased seriously made me twitch, especially coming from an auth provider's blog.