fix auth user in session