Hello, I'm making a simple authentication system of my own and was wondering where encrypted session tokens are supposed to live.. database or cookies?