Added authorization to sessions actions, moved sessions views to HAML