Add tests for sessions controller. Closes #57.