Make user session available via public API, finishes off SIDP-296