add Session#user

The API now returns a user node with the session params.  This will cut
down on the need to do another lookup.