> Is that not effectively a server-side session? With most web frameworks (e.g. Django), the user model is retrieved on every request anyway. So it would be pe

> Is that not effectively a server-side session? With most web frameworks (e.g. Django), the user model is retrieved on every request anyway. So it would be perhaps more accurate to say that it's a server-side session that's effectively not a server-side session, since no additional lookups are needed, only the user model lookup that's already done anyway.