modify LoginCtrl in client and session.js in server to make return user object