using active record for session store