Complete session controller, refactor registration and session specs