add tests for sessions controller