Fixing tests due to session lastAccessed session update. Includes minor changes to make sure the full user object is attached to the session, and that lastAccessed is not written to when users are updated.