store the currently logged-in user in the session