Update WebUser.php

Check user before update session.