roll back to session[:user_id]