http://www.cnblogs.com/xiekeli/p/5607107.html

https://www.oschina.net/question/1264088_220768

token作用 token机制的作用 token机制的目的

 

 

session

http://justsee.iteye.com/blog/1570652

http://netsecurity.51cto.com/art/201402/428721.htm

http://www.jb51.net/hack/5777.html【关键词：cookie欺骗，可百度加深了解】