store user ID in session.
coerce user id to string, remove extraneous logging.
use an object to store user info; user ID is now primary key.