Fixes sessions controller to use string instead of symbol

Defaults for routes was using a symbol previously, now it
is a string. This updates the no_authenticate before filter to check
for the string value
Code spike
Changes identity creation/updates to before_save