use ActiveRecord for session
remove debug code
add player id to access log and remove administrator from the exception list
redirect to top if logined player accesses login page
reword messages to login