session holds only user id
Merge branch 'session-store-id-only'