auth user: fixed important bug when storing user_info in session