Deleted secure params in session controller