update the user variable and not the session variable