Add activties placeholder; refactor sessions

Since Rails4 encrypts session data by default, there is no need to salt
the password and store it's hash - store it directly.