refactored server(session) to use get-user