[Zope] Best practice to keep userinfo in MySql, session management and per-user data?