Could that info be passed to `updateUserInfo` instead?  This just seems like splitting responsibility for the `session.user_info` field.