Add TODO comment in session helper (OPRAM URL, and css auth token), and check sign out if current_user.nil?