The model Session came up with makes sense UX-wise. But I got yelled at for recommending it: something complicated about security, which was way over my head.