WIP: Always redirect_to root_path not /. remove attack_messages