add user and roles to sessions