Double Dependency Injection?

[kung foo man]

		$_SESSION[user] = $userService->getUser(); 
	

A session entry is a serialized piece of data, which cannot hold any resource variables. Either read the stuff you need directly at login time and serialize it into $_SESSION (when the resource is still valid), or, better way IMHO, read the stuff you need every time a user opens the page, so you don't have any out-of-sync data.