Refactor redirect_back_or back into a private sessions_controller method as it's only used in the app there
Clean up commented out code
Refactor user authentication into User class method as per Rails Recipes book
Singularize session as any given user can only access *one* session (their own)
Change Relationship class level method name and add test for it