session before using devise