senchalabs/connect — comment on commit b028b4f20f4737e52a1a455af63aaff828b345a2
File: lib/middleware/cookieParser.js line 51
By visionmedia:

ideally just the sess one, we could move it out and hash the signed value, but then we have to do the same on the other end so we would have the signing overhead. The JSON cookie is used for cookieSession(), and in Express so you can do `res.cookie({ complex: 'obj' })`. It could be removed but then we would need another middleware just for that. Sometimes implementation elegance < usability IMO