Fix minor bug in sessions_controller when user was invalid