I need a simple user identification system for the purpose of allowing/prohibiting an action.
This is not a high-security requirement
Store a small unique identifier on the client side as a cookie, then use that identifier to look up whatever related session data you need on your server's side.