I have a solid working understanding of cookies and sessions, but want to go deeper on the subject. I've been unable to find any canonical documentation on best practices, useful techniques, and patterns to avoid. Have you encountered any examples or documentation that meet any of those criteria?