- Encode cookie as base64(target_url + | + timestamp) per spec - Use cookie value (not targetURL) for shard key and session map keys - Add missing sticky.Start() calls in tests - Fix time precision in cookie encode/decode tests
- Add 256-shard lock map for concurrent session routing - Cookie-based session persistence with base64 encoding - TTL expiration with background cleanup goroutine - Support Secure, HttpOnly, SameSite cookie attributes - Fallback to configured balancer when session target unavailable