Also, session verification doesn’t require a call to the db. It’s stateless with us too 🙂