Use sessions to store user validation