Sessions
Session-security modules cover keeping an already-established session safe for its whole lifetime: cookie flags, revocation on logout or password change, CSRF defenses, and giving users visibility into their own concurrent sessions. For agents building or reviewing session-handling code directly.