Some security concerns with session libary

[eluser]WanWizard[/eluser]
You need the session to maintain state in a stateless environment, you can't do without.
Or do you want to pass all session data back and forth on every request?

Having a session has absolutely nothing to do with being tracked (unless you specifically pull data out of sessions server-side to track your users).