keep session id backed by cookies
make ses id compatible with firebase
finger to class
initial multiuser support