Hash the sid in mongo. So if the db be hacked. The sid won't be release. Improve the security.