added sessions controller test for failure action