Task 0 - Authentication, part C
While the session cookie is an unguessable UUID, you must set the correct protection flags on the session cookie.
While the session cookie is an unguessable UUID, you must set the correct protection flags on the session cookie.