identify user from sessionID