Drop session_start() from Your Paywall: HMAC-Signed Cookies and Single-Use Recovery Links

· Dev.to