fixed NPE on retrieving user information from session