add last_login migration to user table and add update_attributes to session controller