Use deepEqual when checking session data, adjust make_data() to include nested objects