Added user_id into the session when verifying tokens