public virtual UserSession CreateSession(User user)
{
var session = new UserSession { IP = CurrentCredentials.IP };
session.EndsAt = CurrentCredentials.RememberMe ? DateTime.Now.AddDays(30) : DateTime.Now.AddHours(6);
user.Sessions.Add(session);
return session;
}