I like the original approach and the way an admin can impersonate a user is a nice win.