User sessions, what should be stored where? | Hacker News Reader