Some commentary on the experience adding Cookie based authentication for a Servant API
Adventures in functional programming and simple web API servers