rails 4 introduced different strategies, but we never configured one so it would default to a null session.
rails new