Hi Dan, welcome aboard and be welcomed!
Why are you using 3.2.4 instead of 3.2.5? Many fixes and enhancements went into 3.2.5, including in the ecommerce area.
As for cookies and sessions, you might want to read the documentation, included on your copy of OpenACS and at openacs.org (https://openacs.org/doc/security-sessions.html
On 2), that's more of an issue on our site (that has been fixed BTW), not really the toolkit.
If you could write a FAQ to be included as part of our "Getting Started Guide" then please, by all means. It would be a great addition and help.
