Fix injection of SessionUser
Fix injection of SessionUser

The way to get to this is to pull it from the token, not to inject it
directly.

stopfstedt/ilios,dartajax/ilios,thecoolestguy/ilios,ilios/ilios,Trott/ilios,thecoolestguy/ilios,Trott/ilios,ilios/ilios,dartajax/ilios,stopfstedt/ilios