do not cache users in session, see EDUID-179