wouldn't "current_id" or session_card_id or something be better than "authorized id"?  lots of ids are authorized; onlt one is current (and, in the case of anonymous, authorized_id may not be authorized to do much at all)