Use ActionDispatch ParameterFilter on the session

There shouldn't be anything critical in the session, but it is better
to be on the safe side.