Don't skip validations in the SessionsController [closes #157]
Replace update_attribute with update_attributes

In practice we don't need to be skipping validations