Change session to have userId instead of user.