> >  1. By limiting the external dependencies (i.e. the number of django
> > modules I use) I will lower the risk of being hit by a bug that I don't
> > control.
> >  2. AFAICS the session is represented by a cookie, for me this is
> > totally unnecessary since there will be no session. The webservice will
> > have no server-side state to keep track of. Also, there's a lot of
> > smart people out there and they keep on comming up with new and
> > interesting ways to use session cookies (session hijacking, session
> > fixation, etc.).

> if you never ask it to set a cookie, no cookie is ever created.