you don’t need to track users by giving them an ID they send with every request.

in fact. you probably don’t need to track users.