Determining location with restrictions disabled, cleaned up.

src/web/auth.js

@@ -1,6 +1,7 @@
-import crypto from 'node:crypto';
 import { Router } from 'express';
 import IPCIDR from 'ip-cidr';
+
+import runtimeId from '../../utils/runtime-id.js';
 import argv from '../argv.js';
 
 import {
@@ -24,7 +25,6 @@ import {
 
 // changes every time the process restarts, so a deploy invalidates all cached session users
 // even if they're within the staleness window below
-const runtimeId = crypto.randomUUID();
 const sessionStaleThreshold = 5 * 60 * 1000;
 
 // spread into a new object rather than mutating the user we're about to hand back to the