Changed session to authentication in application_controller