Session::topUsers(): actually obey the limit parameter.

HighScoresWidget::update() is already calling Session::topUser(20), but topUser() is discarding the parameter.