Deserialize form post from request object directly

- "sessions" was the name of a Rails resource and should be removed; this plugin is web server-agnostic
Merge branch 'bug/deserialize_credentials_from_request_params' into development