`UserSession`, not `UserManager`