Login before signing out in session specs
Just compare against the controller current user

Eliminate the need to create a database record for a sessions spec.
Tone back the astericks in README