Use correct user.login for session request