attempting to use a fully restful route with redirect_to and deploying session info into the link