diff --git a/keyserver/src/session/cookies.js b/keyserver/src/session/cookies.js
--- a/keyserver/src/session/cookies.js
+++ b/keyserver/src/session/cookies.js
@@ -22,7 +22,6 @@
 import type { InitialClientSocketMessage } from 'lib/types/socket-types.js';
 import type { UserInfo } from 'lib/types/user-types.js';
 import { isDev } from 'lib/utils/dev-utils.js';
-import { values } from 'lib/utils/objects.js';
 
 import {
   isBcryptHash,
@@ -466,7 +465,7 @@
   result: Object,
 ) {
   let threadInfos = {},
-    userInfos = {};
+    userInfos: $ReadOnlyArray<UserInfo> = [];
   if (result.cookieChange) {
     ({ threadInfos, userInfos } = result.cookieChange);
   }
@@ -475,7 +474,7 @@
     sessionChange = ({
       cookieInvalidated: true,
       threadInfos,
-      userInfos: (values(userInfos).map(a => a): UserInfo[]),
+      userInfos,
       currentUserInfo: {
         anonymous: true,
       },
@@ -484,7 +483,7 @@
     sessionChange = ({
       cookieInvalidated: false,
       threadInfos,
-      userInfos: (values(userInfos).map(a => a): UserInfo[]),
+      userInfos,
     }: ServerSessionChange);
   }
   sessionChange.cookie = viewer.cookiePairString;