socket.io api: keep user and xmpp in session