I am actually in favor of the later. If we are going to set information in the session, let's not expose GitHub `uid`s.

Thoughts?