use Deref;
/// The SHA-256 hash of a [`Token`](crate::Token), identifying a session.
///
/// This is the value the application persists (and looks sessions up by):
/// deriving the token from it is infeasible, so a leaked session database
/// contains nothing a client could present. Obtain one from
/// [`start`](crate::start) when creating a session, or
/// [`token_hash`](crate::token_hash) when resolving the current request's
/// session.
;