I need a simple user identification system for the purpose of allowing/prohibiting an action.
This is not a high-security requirement
MAC address would be awesome, but not possible over HTTP unfortunately (and a good thing for user privacy).
Cookie and IP address are your only options.
You can delete the cookie when you're done with it, only have it apply to the path that is relevant, or just have it expire in a few hours/days whatever is appropriate.