SessionsController now expecting parameter :shortname rather than the confusing :email which wasn't an email address ...