sessions controller and cancan and rolify