Also, I would consider storing the session data in a nested hash and extract helpers for interacting with it. This way if/when you move things to ActiveRecord you don't need to rewrite a bunch of route logic.