minor refactor of userController session-related methods