restarting sessions implementation, correct new user page, permit new user parameters