tweaked session test, user controller create action