handling undefined user in create user session