user_session: Remove unused user_hdr variable

The user_hdr variable can be used to hold a string that is displayed on
each page identifying the user, e.g

    Andrew Clayton (100) / Admin

However we are not using that here, so remove it.

Signed-off-by: Andrew Clayton <andrew@dnsandmx.com>