change to use ActiveRecord for storing session information