Use session copying in state/user.go