Authentication works but authenticated information not stored in session