Yes you're right :) this assumes that only one user is using the app at a time. web.go doesn't have per-session storage yet