Save user session KEY (custom states? must not use DB)