user object added to session; firstName shown on application when authenticated