assign $rootScope.user when session starts