incorrect session short description

The session cookie only holds the session token. By default, the data attributes are stored (inside a bag) at a file.
@see NativeFileSessionHandler.

Author: tobemedia

controller.rst

@@ -352,8 +352,8 @@ Managing the Session
 --------------------
 
 Symfony provides a nice session object that you can use to store information
-about the user between requests. By default, Symfony stores the attributes in a
-cookie by using native PHP sessions.
+about the user between requests. By default, Symfony stores the token in a
+cookie and writes the attributes to a file by using native PHP sessions.
 
 To retrieve the session, call
 :method:`Symfony\\Bundle\\FrameworkBundle\\Controller\\Controller::getSession`