Cookies are not really about security, but privacy. Their tracking of your online habits are bad; how would that change with WebSessions?
It looks pretty reasonable to me (except possibly the nonce-management bit). I can't be bothered to try and pick it apart, and anyway I'm no expert.