Implement GET /user route

as session getter.