Previously I've always used a cookie to store a login, but which is better cookie or session?