That's assuming we'll never be able to delete other users, of course. Also, this is not reliable, since AFAIK the user might more than one active session at a time.