sure to remove session[:identity] when create a successful Identity