Removed redundant user auth.

Sessions are already secured with an HMAC signature underneath.