Refactored UserREST login to populate session itself