Fixed user serialization in session