sessions_controller spec
improve specs