LDEV-768: Fixed the problem with the session being closed by changing how the update is done. Previously it used the user object connected to another session - now it looks up the user in the "add user" code, so that it will be part of the same Hibernate session. Given this user is in the cache, it shouldn't add too much time to the call.