User and Session handlers should be in app state, see bitballs for an example
User and Session handlers should be in app state, see bitballs for an example