Sessions are now correctly serializing and deserializing users. Yeeee