module Lato::Sessionable

def authenticate_session
  return true if @session.really_valid?
  respond_to do |format|
    format.html { redirect_to lato.root_path }
    format.json { render plain: '', status: :unauthorized }
  end
  false
end