added user to session object