clean up the sessions controller a little
improve readability in the User.create_from_auth
sessions tests