Removed extra <div> tag from views/sessions/new.html.erb.
Fixed mistake: had 'user.user_id' instead of 'user.id' in create method of sessions_controller.
Removed display of password and salt key from user profile or viewing.