How do I identify logged-in users without asking for user details?