Use model.get_user() instead of checking session manually.