Spock-session-cookie

Stateless JSON sessions using XChaCha20-Poly1305, key rotation and server-checked expiry.