Need to be tagged to expire at, or quickly immediately after, the session’s validity period. This necessity is intended to limit the accumulation of cookies, but SHALL NOT be depended on to enforce session timeouts. Give cryptographic keys properly descriptive names that are