attribute_set fix: store the session into database after setting the attribute_set - then the proper setting will be used in login_complete even when the authentication fails