This looks to me as though it would obscure the user id completely, i.e. it is not possible to map two different requests to the same user as soon as a cookie changes. Is that intended?