add session to user