changed the set_role method to call a private method in the users sessessions controller