Your best bet is probably storing information is a local database. Cookies be deleted or, even better yet, not even accepted in the first place. I think it best to keep the functionality of your site completely transparent. What happens if they visit with a different browser or use another machine to visit your portal? Do they have to create a new account and reconfigure?