store only UID in session vars, not complete user

ui/amcontext.go

@@ -49,7 +49,11 @@ type amContext struct {
 
 // CurrentUser returns the current user from the session.
 func (c *amContext) CurrentUser() *database.User {
-	return c.session.Values["user"].(*database.User)
+	u, err := database.AmGetUser(c.session.Values["user_id"].(int32))
+	if err != nil {
+		log.Errorf("unable to retrieve current user")
+	}
+	return u
 }
 
 // RC returns the HTTP result code for the current operation.

ui/session_mgr.go

@@ -31,7 +31,7 @@ func SetupAmSession(session *sessions.Session) {
 	session.Values["temp"] = "Active"
 	u, err := database.AmGetAnonUser()
 	if err == nil {
-		session.Values["user"] = u
+		session.Values["user_id"] = u.Uid
 	} else {
 		log.Errorf("Unable to load anon user: %v", err)
 	}