Fix spec for session controller