You should include a pin with each ticket and require
it's use, since there is no other auth scheme for
customers. Make it simple like even a 3 digit pin that
is generated along with the ticket and require it's use
when a customer tries to access their ticket.
Logged In: YES
user_id=1210471
maybe even ask the user to input a pin number of their choice.