Inject the user session in the http helper instead of the cert manager