Add note

src/user.rs

@@ -220,6 +220,7 @@ pub async fn login(
     }
 
     // Set session cookie
+    // TODO tehre should be a more complicated notion of a session
     let user_id = Uuid::parse_str(&user.id).map_err(|_| Status::InternalServerError)?;
 
     //TODO make this user-configurable