creating a new user flags the session as first session