make user sessions work.

resolves #40