and pg session storage. Including those is pretty much bullshit since they are so easy to fake. It isn't worth the extra complexity or storage space.