Refactor sessions to use form_tag