Call loadDefaults on failure

Call loadDefaults on failure which matches what the rest of
User::loadFromSession does and makes sure the default values are set.
Merge branch 'restrictsessions-loaddefault' into dev