Fixed session request to match new model.
updated tests accordingly. Also modified hmac function to use MD5, since AES isn't a valid hmac algorithm.