Yes. That’s a good part of the approach; see also: Session Management Cheat Sheet.
In reply to Re^6: CGI::Cookie by Your Mother in thread Re: CGI::Cookie by ramachandrajr