changed redirect in sessions controller