Fix redirect loop

since session[:user] is never set anymore, checking for it never works