redirects to hashed url from sessions#create

This is sadly necessary when serving static pages…

right now.
simplifies users controller