REmoved #auth from sessions controller