Addded serialized user object to pass in session, thus allowing use of user methods rather than simply using a session array to pass values