Retain user IDs rather than user names in the secure cookie