Excellent article !!  I can't wait to try it out.

Sunil

I had an identical problem.

I sorted it by giving each user a 4 digit PIN number.  I passed 2 parameters : user_id and User_pin

So, the user id might be guess-able, but...