Prevent PHP Notice in CentralAuthHooks::onUserLoadFromSession

Validate the data from CentralAuthUser::getSession() before using it.
This does not change functionality as those session are invalid anyway.

Change-Id: Ieada914acdaf311658a160f0e4749baf579f40b9