Remove HttpSession dependency in UserService phase 1 complete