a session identifier for them and store it in a cryptographically signed cookie. If you're using a web framework, look up “how to create a user session using cookies” and follow that guide.

Make sure that whatever cookie library your web framework uses is setting the httpOnly cookie flag. This flag makes it imposs