security getSessionUser fix