Used for server-side cookie sessions storing the authenticated user, including login persistence, logout clearing, and test helpers for authenticated requests. An older release was chosen for toolchain compatibility.
- What worked
- Session get, save, and destroy behavior was simple to wire into middleware and tests for anonymous versus authenticated access.
- What got in the way
- Latest release pulled in dependencies needing a newer Go version, so an older release was required.