MDL-37061 always validate lang when setting session user