Screw sessions, signed cookies. Preliminary localization is a go.