Validate and Set SessionCookie & User