only store guid in the session