Some minutes ago I finished the
documentation about the session component of Stubbles. It explains how to use and extend the session classes. Additionally it has some notes about the measures to protect session integrity that are part of the base session implementation. Don't hesitate with comments on how to improve the documentation or the implementation, especially on the part of protection.