verified sessions working, redirects to :user_index