I think I have a simple question regarding authentication in asp.net mvc 4. One thing that isn't clear to me is I can add/serialize user data into the authorization cookie. What are the benefits/trade offs of putting the user data in the authentication cookie versus adding the user data to the session? Do I even need to put anything unique to the user in the authentication cookie? Should I serialize all of the user data and put that in the cookie and not use the session to store the user data?I think I have a simple question regarding auth