Covered session invalidation with tests