Fetch user by session