session cookie

• CGI::Session
• HTTP::Session — looks good, it's being actively updated

authentication

• CGI::Session::Auth