fix auth_user with session pooling

the auth_user pool wasn't releasing the server conn, so the
client would end up connected to the db as the auth_user