add sessions controller tests
getting user_spec to pass