began work on manual session management then ripped it out in favour of devise