Store session data at server side instead of cookie