Complete session controller and fix the specs for it