validating session returns user name and email