describe ApplicationController#current_user
use User#id instead of #uid for session handling
describe ApplicationController#login?
when session[:id] is invalid, reset session