User a random token for sessioning rather than phone number
Change the sessioning/authentication logic up