Users are now stored in session data