save PFUser from session token