Update user.php to fix duplicate session-duplicate