updated readme to show how to attach things to the session via validate user function