hide session management inside UserService
user is logged in after registration