Imagine that the user was not successfully created and what we get is an instance of a new record, are we still allowing them to log in?

```ruby
  if user
    session[:user_id] = user.id
    redirect_to root_path
  else
    redirect_to root_path, notice: 'Could not login (or something different)'
  end
```