And how would you not allow to abuse this session system? Would you make it more 'transactional' than cookies or what?