was thinking of how would the backend know who the user is as what we just discussed only validates the session xD