Section
2.1.2
Top Level
Sub Level
General
If your site does not need to track a user's activity prior to login, do not issue them a session cookie.
Django
If Django's sessions framework (contrib.sessions) is activated, a session cookie will be created for every visitor to the site.