Yeah I reflected on that after I posted it, maybe it just dumped all the headers to the logs

Yeah, I wonder why any developer thought logging either the session cookie itself was a good idea. I guess they could decode it and figure out which user was having an issue? Still bizzare

Would using rust have prevented this issue?

There was, but now I’m getting older and more tired