create session with a new user, current_user issue had to do with old users in db with no auth_token