User management is handled by google, and you can tie information in
the datastore to the user that created it. Doesn't that get rid of the
need for sessions entirely?
True, true. I've just had to write user management admin user
interfaces one to many times to bother doing it again. =)