fix post signup route. set object to user variable
save session username after signup