There are some bits phrased the wrong way around (e.g. are session parameters passed in URLs? Check!). You don't want to do that. But as list of things to cons

There are some bits phrased the wrong way around (e.g. are session parameters passed in URLs? Check!). You don't want to do that. But as list of things to consider, if you already understand what you're doing, its not too bad.