sessions strong params work around for heroku