def user_id
  return (session[:user_id] ? session[:user_id] : NOT_LOGGED_IN)
end

# INSECURE: Although the function works fine it can be susceptive to
#           misuse since under the hood it sets a username to a non-user.