security fix, reuse session instead of passing the user to the state
remove bootstrap icons as we are using fontawesome now