updated default session users to include only 'real' authenticated users