Original message (Marc Delisle, 11.09.2003 15:17):
I suggest to merge it with cookies, add a config variable to enable it but disable it by default, adding appropriate warning about the security implications.
Done, feel free to update warning, if it is not enough exact.