Fix regular expression used to create new users
Save only the user pk to the session

For security reasons, Django 1.6 defaults to using a JSON serializer so
saving user objects to the session is not possible.