refactored sessions to store id only
assign correct instance variables in challengecontroller#attempt