update user/session functionality