Is there anohter way to go about this other than using session ids?