is there a better method of getting / keeping a user logged in other than cookies or session variables ?