Proper serialize/deserialize user methods; grabbing user from the database (thanks @trevonromanuik)