Should session cookie options be base64 encoded? Enabling this can sometimes make cookies smaller (but the reverse is also true). This simply obfuscates the cookie in the users browser, this is NOT encryption!