read user data only from session