fetch user from database instead of using the one in the session to avoid hibernate exception