sessions controller login spec corrected
destroy patient session