If people find it a good idea to be able to get $user->sid even for
not authenticated users... I don't mind about the implementation ;)
If people think it is a bad idea, I'd like to know why.
i can't make out what your proposal is. please post a patch.