I’m not worried about hash collision with sha256. Any reason why I should be? :)

And we can’t use cookies because of PECR!