If add_user gets called on user object that's already being tracked
by object path, we can end up replacing and freeing the user object
but leaving the old object path memory in the hash table.

This commit makes sure we replace the key when replacing the object.