Removed new IDocumentSession instantiation from GetUserAuth and used privately declared _session instance to resolve multiple open session conflicts when calling IDocumentSession::Store.