added session configuration before each testcases
added authorize for admin controllers