changes to the SessionsController.rb