Inlined Repository.update.
Session data should default to empty object.
Replaced setUid with setUser. Removed getUid.