authorisation should redirect to sessions->show
Relieve rails dependency