updates users and sessions