Where I work, we use cookies; each Perl CGI program in the suite checks the cookie as its first responsibility, using code from a common in-house module. We do this because: