AuthBean: change way to load the user from the sesssion