Now going to UserSpaceSession, via Autowire

Big change for one small function, but this serves as the proof of
concept going forward.

First step in the direction of having the core work done under
UserSpaceSession *instead* of in controllers.  In the medium term, this
is very architecturally important.