`session.signIn*()` now returns the signed user.