Yes, session cookies are excepted under Reg 6(4)(b). Most other cookies are capable of implicit consent.

My understanding is that it depends what you are using them for. Keeping items in a shopping cart is fine, remembering a name in a comment form is not (strictly).