modified:   app/controllers/sessions_controller.rb