added patch for checking passport user exists before storing session