Cookie-based Session Management

Explain the security and state-synchronization requirements of browser-based sessions.