Many web application frameworks will do the session management for you. But you still have to configure it and make implementation choices.

I will present an overview of best practises and lead you through common pitfalls.