Close #78

I'm still not sure how the user wound up in this configuration, but we're taking two countermeasures: (1) writing the UID to the config file on login; and (2) using the UID in the session object for generating proofs
documentation tweaks.