That's an excellent question, one that I completely forgot about. I want session to only be held in user.js. Thanks for pointing that out! I forgot about my own intentions. I'll see how much effort it involves and we can decide whether it makes sense to pile on here or whether it is better in its own PR.