Typo: req.session.used -> req.session.user

Line 54 of https://github.com/walmartlabs/hapi/blob/master/lib/request.js leads me to believe you wanted to write `user` and not used.