`whois` command introduced to match session IDs with actual users
cache user in the profile object for attribute callthrough