added updated_at to models where it makes sense
fixed session unit test to match the 404 on get /session