1. Assign a unique ID to every user.
  2. Block anonymous or shared access.