Matthias Benkard authored Aug 14, 2014 and Matthias Benkard committed Apr 23, 2015

MulkyID does not use session state stored in /tmp anymore.  Instead, it
uses a cookie encrypted with the private part of the MulkyID
instance's RSA key.