remove find_by_*
use session store in db