you give them a cookie with that id