gorilla/sessions appeared in late 2012, and since then:

• Go's own APIs have changed
• We've collected a ton of feedback around what gorilla/sessions should do and how it's used (and misused!)

Thus we'd want to break out a new v2.0, particularly as golang/dep matures, which will make it easier for package users to pin to a pre-2.0.0 series whilst still receiving any critical bugfixes.

This relies on gorilla/securecookie v2.0 landing first.