strengthened two sessions_spec tests

Previous tests could have redirected to anything and still would have worked.  Made them better by specifying exact redirect destination.