Maybe a cookie or PHP session expert will jump in with some thoughts.
No need. You are exactly correct.