root should not be set to session#new, but to different action inside app like contest#index or so, and there redirected to login screen when session do not exists