update sessions_controller with redirect_back_to_user