changing session to active record instead of cookies... got a strange syntax error message when trying to deploy with the default setup.  Very scary