changed the sign_in method on session controller