It's usually just a long that maps to the user id....

# server

[andrewoma]

It's usually just a long that maps to the user id. We sometimes serialise to JSON if there's more data. e.g. a device id to lock a session to a particular device