request userInfo upon successful authorization and add to encrypted session