add user to session