user: extract get user session logic out from UserInformation so other functions can use it
auth: move GetUserSession, AddUser, Authenticate, and GetUser to the auth file