Implement GET /user route

as session getter.

regarding user factory implementation
Should this stay this way or was just commented for debugging purposes?