added a user object, session tracking