Simplify session caching.

Store only user_id in the session and retrieve user from
the site.users collection.