Use session to store user validation

Passing the user param to the verify_computer view through a url param was a security hole.