changed session to save user id not user object