in reply to Securely storing session data

Of course this should work, you should use one time passwords for it.