Refactor session decryption into its own module and add current_user helper
Fix condition for checking session and update comments