ok.  session[:user_id] would be better, but I guess that would break existing sessions...