Update user.py

replace @with_transaction with @db_session