Login now uses the database to set the session.user