[cortesoft]

You might be, but many people use signed cookie sessions in order to avoid having to check the DB.