Commit 1fed3df

@@ -1,9 +1,18 @@
 class SessionsController < PublicController
+  def new
+    if current_user.present?
+      redirect_to dashboard_path
+    else
+      @user = User.new
+    end
+  end
+
   def create
     if user_session = User.login(
         params[:user][:username],
         params[:user][:password]
     )
+      reset_session
       session[:user_id] = user_session.access(request)
       redirect_to dashboard_path
     else
@@ -12,17 +21,9 @@ class SessionsController < PublicController
     end
   end
 
-  def new
-    if current_user.present?
-      redirect_to dashboard_path
-    else
-      @user = User.new
-    end
-  end
-
   def destroy
     UserSession.authenticate(session[:user_id]).try(:revoke!)
-    reset_session()
+    reset_session
     redirect_to root_path
   end
 end