Added last name to session

authenticate now adds the user's last name to the session, which can be
used by the header.