Stopping user delete.  Customize if needed.
Making a user model instance out of the returned session.  Now user updates can be saved by doing appState.attr('session').save();