enhance notification mecanism: recipients may return user entities, which will be used to create a fake session so one can check security during notification if necessary

5