adding session[:user_id] to create action in user controller