changed hash format in sessions controller