Should update real name when updating session, not password