removed allowed_params from sessions cntrlr
logged in user can edit their profile info