Look at failure handling in sessions_controller

``` ruby
    # TODO: MOET NOG!
    def failure
      redirect_to new_session_url,
                  flash: { error: 'Sorry, there was something wrong with your login attempt. Please try again.' }
    end
```

Is this ever called? Do we need to do anything different in this case?
