Cleanup users controller.
Refactor sessions controller
Call find_by_id instead of find so invalid sessions don't throw an error.
Keep Changelog up to date.