reverted back to new_user_session instead of new_session