Refactor to use WebSessionRepository and WebUserRepository