fix specs for auth#destroySession with no arg
changelog