Fix lookup of username from session in GET /login route.