changes to the sessions_controller.rb