storing current user in session