user: rename GetUserSession to GetUserFromSession