changed session new.html to use form_tag