[fpc-pascal] web app and application persistency

[Marco van de Voort]

In our previous episode, Andrew Brunner said:
> > username/sessionID, then send an empty sessionID cookie (this will
> > delete the sessionID cookie in client)
> 
> I agree with this one.  The only thing I could add would be AJAX &
> WebSockets for really advanced applications.

I thought websockets were disabled in most current browsers due to security
concerns?