fixed session bug when user is created