Store user ID in session (not the whole user)