Fixed session test. We can now log in with a JSON POST, but it's not used anywhere yet.