What are the advantages/disadvantages of each method for state tracking? My inclination is to go with hidden variables because they would be harder to spoof and you wouldn't have to worry about users that wouldn't accept cookies. Any thoughts or suggestions?
