change session storage to activerecord