Use compound key for user sessions.