diff --git a/keyserver/src/session/cookies.js b/keyserver/src/session/cookies.js
--- a/keyserver/src/session/cookies.js
+++ b/keyserver/src/session/cookies.js
@@ -22,7 +22,6 @@
 import type { SIWESocialProof } from 'lib/types/siwe-types.js';
 import type { InitialClientSocketMessage } from 'lib/types/socket-types.js';
 import type { UserInfo } from 'lib/types/user-types.js';
-import { values } from 'lib/utils/objects.js';
 
 import {
   isBcryptHash,
@@ -573,7 +572,7 @@
   result: Object,
 ) {
   let threadInfos = {},
-    userInfos = {};
+    userInfos: $ReadOnlyArray<UserInfo> = [];
   if (result.cookieChange) {
     ({ threadInfos, userInfos } = result.cookieChange);
   }
@@ -582,7 +581,7 @@
     sessionChange = ({
       cookieInvalidated: true,
       threadInfos,
-      userInfos: (values(userInfos).map(a => a): UserInfo[]),
+      userInfos,
       currentUserInfo: {
         anonymous: true,
       },
@@ -591,7 +590,7 @@
     sessionChange = ({
       cookieInvalidated: false,
       threadInfos,
-      userInfos: (values(userInfos).map(a => a): UserInfo[]),
+      userInfos,
     }: ServerSessionChange);
   }
   if (viewer.cookieSource === cookieSources.BODY) {